ORM and SQL injections
If i use a ORM (Eg: SQLAlchemy or the one that comes with Django ), does that mean my web applica开发者_如何学运维tion is protected from SQL Injections or i need to take extra precautions for that ?
I believe that it has a quoting system like most of ORM's (check the source), so you would probably be safe unless you override it. It never hurts to take extra precautions, though you're never really 100% safe.
精彩评论